Azure Cloud Security Engineer at Accenture

Accenture; Lisboa; Híbrido; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

Accenture seeks an Azure Cloud Infrastructure Security Engineer in Lisbon (hybrid) to join our Porto Cybersecurity CoE team. You will design, implement and secure Azure landing zones and the IaaS and PaaS services deployed within them.

You will work with cloud platform, networking and DevOps teams to implement security controls, enforce baselines and policy-driven governance, and validate secure deployments of Azure resources. Strong English communication is required.

Qualificações

• Bachelor's degree or equivalent professional experience in IT, CS, cybersecurity or engineering.
• Minimum of 1 year of experience in Azure cloud engineering and cloud security.
• Hands-on experience deploying, configuring, or supporting Azure IaaS and PaaS resources.
• Knowledge of Azure landing-zone concepts, networking, IAM, and policy-based governance.

Responsabilidades

• Support the design, implementation and secure operation of Azure landing zones.
• Define and enforce security controls for Azure IaaS and PaaS resources.
• Maintain baselines and hardening standards across Azure subscriptions and resources.
• Implement Azure identity and access controls including RBAC and managed identities.
• Configure network security controls and CSPM-related monitoring and governance.
• Integrate security controls into CI/CD pipelines and collaborate with DevOps teams.
• Monitor and remediate CSPM findings, enforce cloud governance and security policies.

Conhecimentos

Azure security

IaS/PaaS security

Networking security

Infrastructure as code

Azure Policy

IAM & RBAC

Cloud governance

Terraform/Bicep/ARM

CI/CD security

English communication

Formação académica

Bachelor's degree in IT / CS / Cybersecurity / Engineering

Ferramentas

Terraform

Bicep

ARM templates

Descrição da oferta de emprego

This Full time on site position offers great opportunities for career growth. Accenture Security helps organizations prepare, protect, detect, respond, and recover across all aspects of the security lifecycle. Cybersecurity challenges are different for every business and industry. Leveraging our global resources and advanced technologies, we create integrated solutions tailored to our clients' needs across their entire value chain. Whether defending against known cyberattacks, detecting and responding to unknown threats, or running an entire security operations center, we help companies build cyber resilience and grow with confidence. We combine risk strategy, digital identity, cyber defense, application security, and managed services to rethink the entire security lifecycle. We are seeking an Azure Cloud Infrastructure Security Engineer to join our Porto Cybersecurity CoE team. This role is based in Lisbon and will support the design, implementation and secure operation of Azure landing zones and the IaaS and PaaS services deployed within them. You will work directly with cloud platform, infrastructure, networking and DevOps teams to implement cloud security controls, configure platform guardrails and validate the secure deployment of Azure resources. The role combines practical Azure infrastructure knowledge with cloud security expertise. Key areas include identity and access management, network security, platform hardening, Azure Policy, encryption, logging and monitoring, secure resource configuration and infrastructure-as-code security. You will participate in cloud security initiatives across the organization, working closely with business, infrastructure, engineering and DevOps teams to strengthen the security posture of Azure-based solutions and promote security best practices across cloud environments.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field, or equivalent professional experience
• Minimum of 1 years of experience in Azure Cloud engineering and cloud security, infrastructure, or related technical roles
• Hands-on experience deploying, configuring or supporting Azure IaaS and PaaS resources
• Working knowledge of Azure landing-zone concepts, including management groups, subscriptions, resource organization, policy and access control
• Practical understanding of Azure networking, including virtual networks, subnets, routing, network security groups, firewalls, private connectivity and DNS
• Understanding of Azure identity and access management, including role-based access control, managed identities and least-privilege access
• Experience implementing or validating cloud security baselines and resource hardening requirements
• Familiarity with Azure Policy and policy-driven cloud governance
• Basic experience with Terraform, Bicep, ARM templates or another infrastructure-as-code technology
• Understanding of encryption, key management, secrets management, logging and monitoring in Azure
• Ability to analyse cloud configurations, identify security weaknesses and support their remediation
• Understanding of cloud security principles, risk assessment methodologies, and security control validation
• Knowledge of cloud compliance, risk assessment, and security governance concepts
• Familiarity with cloud security posture management (CSPM) solutions
• Basic understanding of CI/CD processes and associated security considerations
• Strong analytical, problem-solving, and communication skills
• Ability to collaborate effectively with cloud platform, networking, infrastructure and DevOps engineers
• Fluent English, with clear written and verbal communication skills

Responsibilities

• Support business and technology projects by providing cloud security expertise throughout the project lifecycle
• Support the secure design, implementation and continuous improvement of Azure landing zones
• Implement and validate security controls for Azure IaaS and PaaS resources
• Define, maintain and promote baselines and hardening standards to Azure subscriptions, virtual machines, storage, databases, application services and other cloud resources
• Support the implementation of Azure identity and access controls, including role-based access control, managed identities, privileged access and least-privilege permissions
• Implement and troubleshoot network security controls, including network security groups, Azure Firewall, private endpoints, service endpoints, routing and network segmentation
• Review cloud architectures and validate security requirements through security assessments and architecture reviews
• Contribute to the design, implementation and continuous improvement of secure Azure cloud architectures
• Assess cloud-native services and workloads to identify security risks and recommend mitigation measures
• Secure CI/CD pipelines by defining and promoting security controls across development, building, testing and deployment processes
• Collaborate with infrastructure, development and DevOps teams to integrate security controls into cloud environments
• Monitor cloud security posture and support remediation activities identified through CSPM findings
• Assist in the enforcement of cloud governance and security policies across Azure environments
• Configure and maintain Azure Policies to implement and enforce cloud security controls
• Stay informed about emerging cloud security threats, vulnerabilities and industry best practices

Nice to Have

• Experience supporting or implementing an Azure landing zone and network security components
• Hands-on experience with Azure Policy and CSPM tools
• Experience securing Azure virtual machines, storage accounts, databases, application services, containers or Kubernetes services
• Experience performing cloud security assessments and secure cloud architecture reviews
• Exposure to security baseline development and cloud hardening practices
• Understanding of cloud risk management and remediation processes
• Knowledge of CI/CD security controls and secure deployment practices

Relevant Azure, cloud, or cybersecurity certifications are considered an advantage, including:

• Microsoft Certified: Azure Fundamentals (AZ-900)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Additional Information

Location: Lisbon (hybrid). Minimum of 3 days per week onsite in Alfragide. Travel: Flexibility to travel within Europe for project activities and stakeholder engagements